Some variants of KLEZ set the From: to an address taken from
the same addressbook as the To:. This makes tracking the source 
just a bit more difficult...

-- 
Daniel Taylor
dante at plethora.net

On Mon, 2 Sep 2002, Brian wrote:

> Did anyone on this list receive Klez from an address of
> redhat-list at redhat.com?  It's been bounced off some .jp mail servers, I'm
> trying to figure out if a geek friend of mine has Klez, possibly from this
> list.  I've received Klez masq'd as some other geek addresses, so I have
> to assume A) I know a linux user who's carelessly using Outlook or B) I
> know a linux user who tried to port it to WINE.
> 
> -Brian
> 
> 
> _______________________________________________
> Twin Cities Linux Users Group Mailing List - Minneapolis/St. Paul, Minnesota
> http://www.mn-linux.org
> tclug-list at mn-linux.org
> https://mailman.mn-linux.org/mailman/listinfo/tclug-list
>